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The invention relates to a device for processing user information, the device 
being arranged for cooperation with use enabling means, the latter means being arranged for 
enabling the use of the device taking account of a security feature that corresponds to a data 
circiut. 

10 The invention further relates to a method of enabling a use of a device for 

processing user information, the use of the device being enabled by use enabling means 
taking account of a security feature, the security feature corresponding to a data circuit. 

The invention further relates to a data carrier for enabling a use of a device 
with an electric circuit, the circuit comprising use enabling means and circuit components for 

IS producing communication means of the data carrier, which are provided for applying a 
security featurje corresponding to a data circuit for which use enabling means are provided 
and where the use enabling means taking account of the security feature are arranged for 
generating a use enabling signal for enabling the use of the device. 

The invention further relates to a circmt for a data carrier for enabling a use of 

20 a device, the circuit comprising use enabling means and circuit components for producing 
coimnunication means of the data carrier, which are provided for applying a security feature 
that corresponds to a data circuit for which use enabling means are provided and where the 
use enabling means taking accoimt of the security feature are arranged for generating a use 
enabling signal for enabling the use of the device. 

25 



Such a device of the type defined in the first paragraph and such a method of 
the type defined in the second paragraph and such a data carrier of the type defined in the 
third paragraph and such a circuit of the type defined in the fourth paragraph are known firom 
30 patent document WO 97/45814. 

The known device with which the known method can be performed is realized 
by a mobile termmal - in the present case actually by a mobile telephone ~ which terminal 
comprises the data carrier with the known circuit in the form of a so-called Subscriber 
Identification Module, SIM for short, where the SIM embodies use enabling means of the 
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mobile telephone and the circuit contained therein embodies the data circuit. To be able to 
use the mobile telephone to carry out a business activity, a security code is to be entered by a 
user of the mobile telephone via a keypad of the mobile telephone, vs^ch security code 
coiresponds to the SIM or data circmt respectively and with the aid of which the user is 
personally authorized. The security code entered in the mobile telephone is used for 
authorization of the user with the aid of the SIM and produces a security feature that can be 
rendered available to the mobile telephone. The use of the mobile telephone for the purpose 
of carrying out the business activity for an authorized user is made possible or released 
respectively as a resxdt of the authorization by the SIM. 

In the known conmiunication device there is the problem that providing the 
security code only fulfils its purpose because the communication device is imlimitedly 
accessible for carrying out the business activity after the user has been authorized, so that 
also an imintentional business activity determined by a faulty operation by the authorized 
user or even deceitfial activities by non-authorized users in case the authorized xiser is not 
careful and alert enough cannot be excluded. The security code provides a further problem in 
that such a security code is occasionally hard to remember for a user and is therefore not 
always available to the user. This is especially true when there are special curcumstances for 
the user, such as, for example a situation of stress or a situation of uicreased attention, which 
circxunstances practically claim the user's full concentration, so that entering a practically 
always extremely abstract security code becomes relatively difficult and relatively frequently 
leads to an erroneous entry if the user does not take into the bargain to reduce the 
circumstances-attendant attention to remember the security code and enter the security code. 
A further problem exists in a combination with a personalization of this security code, 
because personalization attempts usually lead to a use of a security code that can easily be 
guessed and therefore does not come up to its securing purpose. 

It is an object of the invention to resolve the problem mentioned above with a 
commxmication device of the type defined in the first paragraph and with a method of the 
type defined in the second paragraph and with a data carrier of the type defined in the third 
paragraph and with a circuit of the type defined in the fourth paragraph and an improved 
conmiunication device and an improved method and an improved data carrier and an 
improved circuit. 
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To achieve the object as defined above, a device in accordance with the 
invention has inventive features so that a device according to the invention can be 
characterized in the manner defined hereafter, that is a device for processing user 
information, the device being provided for cooperation with use enabling means, the latter 
5 means being arranged for taking accoimt of a first security feature which first security feature 
corresponds to a data circuit and can be applied to the use enabling means and is formed by 
movement data, which movement data represent a movement of at least one data circmt 
along at least one defined track, and in which the use enabling means are arranged for 
enabling the use of the device when the movement data correspond to fixedly predefined 
1 0 specified movement data. 

To achieve the object defined above, a method in accordance with the 
invention has inventive features so that a method according to the invention can be 
characterized in the manner defined hereafter, that is a method of enabling a use of a device 
for processing user information, in which for enabling a use of the device a first security 
IS feature is taken into account by use enabling means, which first security feature corresponds 
to at least one data circuit and is applied to the use enabling means and is formed by 
movement data which represent a movement of tiie at least one data circuit along at least one 
defined track and in which the use of the device is enabled if the movement data correspond 
to fixedly predefined specified movement data. 
20 To achieve the object defined above a data carrier in accordance with the 

invention has the following features according to the invention, so that a data carrier 
according to the invention can be characterized in the manner defined hereafter, that is a data 
carrier for enabling a iise of a device, comprising an electric circuit, tiie circuit comprising 
use enabling means and circuit components for producing first commxinication means of the 
25 data carrier which are arranged for contactless commimication and which are provided for 
applying a first security feature to the use enabling means, which first security feature 
corresponds to at least one data circioit and is formed by movement data, the movement data 
representing a movement of the at least one data circuit along at least one track and in which 
the use enabling means are provided for taking the first secxirity feature into account and for 
30 generating a use enabling signal if the movement data correspond to fixedly predefined 
specified movement data. 

To achieve the object defined above a circuit according to the invention has 
tiie following features according to the invention, so that a circuit according to the invention 
can be characterized in the manner defined hereafter, that is a circuit for a data carrier to 
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enable a iise of a device, the circuit having use enabling means and the circuit comprising 
circuit components for producing first commxmication means of the data carrier which are 
provided for contactless commvmication and for applying a first secxirity feature to the use 
enabling means, the first security feature corresponding to at least one data circuit and being 
fomied by movement data, the movement data representing a movement of the at least one 
data circuit along a track and in which the use enabling means being provided for taking 
account of the security feature and for generating a use enabling signal if the movement data 
correspond to fixedly predefined specified movement data. 

Providing the measures according to the invention includes the advantage that 
a security feature which can relatively easily be noticed by tiie user and especially complies 
with a user's individuality can be used without any problem, which allows a real 
personalization of this security feature as is practically always desired and with a nearly 
infinite variety and even without the securing effect of the security feature getting lost, which 
is quite opposite to a secxmty feature based on abstract sign strings, with which security 
feature attempts mostly culminate in a use of a few very similar or even identical sign strings, 
so that the securing effect of such an abstract security feature often has to be questioned. A 
fiirther advantage consists of the fact that a security feature based on a movement can 
relatively easily be noticed and can therefore even in situations of increased alertness and 
concentration be used relatively aptly witiiout the alertness or concentration suffering 
therefix)m, because generating a movement itself causing the security feature to arise can be 
carried out practically without any problem for a user in such a situation and without much 
concentration effort - namely, intuitively. Furthermore, the advantage is obtained that as a 
result of the use of different movements also the implementation of different functions in the 
device is made possible, which with a conventional abstract security code would normally 
fail in that too much would be asked firom a user because of the mxiltiplicity of security codes 
to be noticed and this feature would not be used. 

With a solution according to the invention it has proved to be particularly 
advantageous if additionally the characteristics as claimed in claim 2 or 9 or 17 or 24 are 
provided. They bring in the advantage that in addition to the first security feature 
representing the movement, an additional second security feature for enabling the use of the 
device, such as for example an abstract security feature known firam the state of flie art and 
known per se and consisting of sign sequences or also a fingerprint or another biometric 
feature characteristic of a user can be used, that a personal individualization is hardly 
accessible or not accessible at all. This has proved to be particularly advantageous for the 
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case where for example a hierarchical enabling of the use of the device should take place, so 
that for example with each level of use where there is the largest requirement as to security, a 
second security feature can be used in addition to the first security feature, without having to 
do without the individuality of the first security feature to reach this level of use. 
5 Consequently, deceitfiil or xmdesired use is then excluded with practically one himdred per 
cent certainty if a non-authorized user would gain the second security feature, because 
without the movement caused by an authorized user the second security feature is without 
any effect and therefore, in principle, there would then not be any serious security problem if 
a security feature comprising an abstract sign sequence is noted down on a piece of paper and 

10 would end up in the wrong hands. This fiirther achieves the advantage that a use of the device 
at any time and at undesired places can be avoided with very much certainty as this is 
especially required when an activity is to be carried out for security reasons and for the 
purpose of avoiding xmdesired use by non-authorized persons, so that the protection against 
unauthorized use if only the conventional security code is used is improved considerably. 

1 5 With a method according to the invention it has proved to be particularly 

advantageous if, additionally, tiie features as defined in claim 10 are provided. This provides 
the advantage that a highly cost-efifective and economically advantageous execution of the 
method is possible with the device. This fiuther achieves the advantage that an almost 
simultaneous taking accoimt of the two security features can take place. Furthermore, the 

20 advantage is obtained that a unique assignment between a user and the two security features 
is given by the sole data circuit 

The solutions according to the invention have further proved to be 
advantageous if, additionally, the features as claimed in claim 3 or claim 1 1 are provided. 
The advantage is then obtained that the data circuit can be accommodated in an appliance 

25 outside the device, in which the second security feature can be applied to the data circuit for 
example by a keypad of the external appliance and is applied to the device by the data circuit 
during a contactiess communication with the device, in which at the same time the movement 
of the data circuit accommodated in the external appliance can be taken into account as a 
consequence of maintaining the external appliance. 

30 With the solutions according to the invention it has fiirther proved to be 

advantageous if, additionally, the features as claimed in claim 4 or claim 12 are provided. 
Consequentiy, the advantage is obtained that a mobile embodiment of the device, such as, for 
example a mobile telephone, can be advantageously produced, the first security feature being 
in a position to be rendered available while use is made of a contactiess communication for a 
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suitable positioning sequence or during a suitable movement of the device as against a device 
provided for contactless communication with the first commxmication means of the data 
circuit. 

In the solutions according to the invention there may be provided, for 
example, that the use enabling means are provided for detecting a movement in which 
optically generable information is used. However, it has proved to be particularly 
advantageous if additionally the features as claimed in claim 5 or claim 13 respectively are 
provided. This achieves the advantage that ahnost simultaneously with a concununication 
between the device and the at least one data circuit tiie movement can be detected tiiat 
renders an unauthorized or possibly deceitfully motivated use of the at least one data circuit 
or appliance practically impossible, because it can be established that the movement is indeed 
detected only by means of a certain data circuit or an exactiy defined group of data circuits. 

In tiie solutions according to the invention may be provided for example that 
the movement relative to the location is canceled one-dimensionally or two-dimensionally as 
a result of which at least a movement corresponding to a straight-line or curved track or a 
movement corresponding to a change of position of the at least one data circuit can be 
detected. However, it has proved to be particularly advantageous if, additionally, the 
characteristic features as claimed in claim 6 or claim 14 respectively are provided. This 
achieves the advantage that more particularly with a contactiess conmiunication between at 
least one data circuit and the device the available three coordinates of the space and a time- 
dependent change of the respective coordinates or the associated speed or acceleration can be 
taken into account for the detection of the movement, which is important with a complex 
movement consisting of a nimiber of partial movements and/or changes of position, vAdch 
movement may comprise movement phases as well as phases of rest. 

• In the solutions according to the invention may be provided, for example, that 
the specified movement data are stored in the device. However, it has proved to bw highly 
advantageous if, additionally, the features as claimed in claim 7 and 15 respectively are 
provided. This achieves the advantage that the specified movement data need not be stored 
locally in the device, but be saved or stored respectively, at a place away from the device, 
which enables a highly efficient use of the device for a multiplicity of users. 

In a data carrier according to the invention and a circuit for a data carrier 
according to the invention it has further proved to be advantageous i^ additionally, the 
features as claimed in claim 18 and 25 respectively are provided. This achieves tiie advantage 
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that a movement occulting with a contactless commimication is taken into account as a first 
security feature. 

In the solutions according to the invention it has further proved to be 
advantageous if additionally the features as claimed in claim 19 and 26 respectively are 
provided. This offers die advantage that even with the occurrence of only a single antenna 
signal already a movement is available as a first security feature. 

In the solutions according to the invention it has further proved to be 
advantageous if additionally the features as claimed in claun 20 and 27 respectively are 
provided. This offers the advantage that a movement detection depending on communication 
content is made possible. 

In the solutions according to the invention it has further proved to be 
advantageous if additionally the features as claimed in claim 21 and 28 respectively are 
provided. This offers the advantage that a decision about the validity or the invalidity of 
security features can be made that cannot be influenced by an environment of the data carrier 
or circxiit, which security features were applied to the data carrier or circuit respectively. 

In the solutions according to the invention it has further proved to be 
advantageous if additionally the features as claimed in claim 22 and 29 respectively are 
provided. This offers the advantage that a use enabling signal can be produced that caimot be 
influenced by a contactiess communication and therefore satisfies the strictest security 
standards. 

The aspects defined hereinbefore and further aspects of the invention are 
apparent firom the illustrative embodiments described hereinafter and are explained with 
reference to these illustrative embodiments. 

The invention will be further described in the following with 
reference to four illustrative embodiments shown in the drawings, to which, however, the 
invention is not restricted, in which: 

Fig. 1 shows in a diagrammatic way in the form of a block diagram a 
commxmication device in accordance with a first illustrative embodiment of the invention. 

Fig. 2 shows in analogous way to Fig. 1 a communication device in 
accordance with a second illustrative embodiment of the invention. 

Fig. 3 shov^ in analogous way to Fig. 1 a communication device in 
accordance with a third illustrative embodiment of the invention, and 
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Fig. 4 shows in analogous way to Fig. 1 a commxinication device in 
accordance with a fourth illustrative embodiment of the invention. 



Fig. 1 shows a device, a conmiunication device 1, which is arranged for 
receiving a signal S which can be delivered by a first data carrier DCl that can be inserted in 
a communication area of the communication device 1 and is arranged for contactless 
commimication, which data carrier DCl includes a data circuit not shown in the Fig. 1 . 

The communication device 1 has an antenna configuration 2 which is formed 
by a first antenna panel 2A, a second anteima panel 2B and a third antenna panel 2C. Each of 
the three antenna panels 2A, 2B, 2C has a number of antennas A schematically shown by 
lines in Fig. 1, only three respective antennas A per antenna panel 2 A, 2B and 2C being given 
the reference character A. The antenna panels 2A, 2B and 2C meet in the origin of a 
Cartesian system, which is put up by the axes X, Y and Z. The first anteima panel is oriented 
parallel with the XY plane. The second antenna panel 2B is oriented parallel with the YZ 
plane. The third antenna panel 2C is oriented parallel with the XZ plane. The antennas A of 
the first antenna panel 2A have such a configuration that each antenna A has a reception lobe 
that stretches out in essence in the Z direction. The antennas A of the second antenna 
panel 2B have such a configuration that each antenna A has a reception lobe that stretches out 
in essence in the X direction. The antennas A of the third antenna panel 2C have such a 
configuration that each anteima A has a reception lobe that stretches out in essence in the Y 
direction. The antennas A finlher have such a configuration that neighboring reception lobes 
only slightiy overlap. In the present case the first antenna panel 2A has twenty-four 
antennas A, the second antenna panel 2B twenty-one antennas A and the third antenna 
panel 2C eighteen antennas A. At this point it should be observed that also another number of 
anteimas may occur per antenna panel 2A, 2B and 2C, the respectively selected number of 
antennas then corresponding to a required spatial solution concerning a position of the first 
data carrier DCl within the communication area defined by the anteima configuration 2. It 
may fiirther be provided that in lieu of the three antenna panels 2A, 2B and 2C only two 
antenna panels can be provided, for example the antenna panels 2A and 2B, in which in this 
case a movement of the first data carrier DCl in the communication area can only be 
evaluated with respect to two coordinates of the coordinate system. In the present case there 
are Cartesian coordinates for characterizing a movement of the first data carrier DCl. In 
another case, where for example the individual antenna panels 2A, 2B and 2C are not 
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arranged at right angles to each other, also polar coordinates may be provided for 
characterizing a movement. 

The antenna configuration 2 can deliver first antenna signals SI, second 
antenna signals S2 and third antenna signals S3, the first antenxia signals SI representing the 
parts of the signal S receivable by the antennas A of the first antenna panel 2 A and the 
second antenna signals S2 representing parts of the signal S receivable by the antennas A of 
the second antenna panel 2B and tiie third antenna signals S3 representing the parts of tiie 
signal S receivable by the antennas A of the third antenna panel 2C. Accordingly, the first 
anteima signals SI are formed by twenty-foxir sub-signals, the second antenna signals S2 are 
formed by twenty-one sub-signals and the third antenna signals S3 are formed by eighteen 
sub-signals. 

The commvmication device 1 includes a signal processing stage 3 which is 
arranged for receiving the first antenna signals SI and the second antenna signals S2 and the 
third antenna signals S3 and for evaluating with the signal S signal information SI 
communicated to the commimication device 1 and represented by the three groups of antenna 
signals SI, S2 and S3. The signal processing stage 3 is fiirfher arranged for delivering the 
evaluated signal information SI. The signal information SI serves to authorize a user of the 
conmiunication device 1 or of the first data carrier DCl as is described hereinafter. 

The communication device 1 fiuther comprises information processmg 
means 4 which are provided for processing signal information SI. The information processing 
means 4 are fiirther provided for querying security feature information SFI about a 
commimication connection CC of the communication device 1 after processed signal 
information SI has been received, while a communication to a data processing device not 
shown in Fig. 1 and external to the commxmication device 1 can be effected. As a result of 
this commxmication the information processing means 4 are fiirther arranged for receiving the 
security feature information SFI from the data processing device, in which the security 
feature information SFI has security code information SCI which forms specified security 
information and has specified movement data MI. The security code information SCI 
represents a seciirity code that can be rendered available by a user of the communication 
device 1 . The specified movement data MI represent the movement of the first data carrier 
DCI that can be caused by a user of tiie communication device 1 . The information processing 
means 4 are fiirther arranged for delivering the security code information SCI and the 
specified movement data MI. The information processing means 4 are fiirther arranged for 
receiving a use enabling signal ES and, as a consequence of the reception of the use enabling 
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signal ES for enabling a use of the communication device 1 for carrying out a business 
transaction. For this purpose the information processing means 4 are further arranged for 
receiving transaction parameter data TPD and, while utilizing the signal infomiation SI and 
the transaction parameter data TPD, for generating and delivering transaction information TI 
5 via the communication connection CC, which transaction information TI forms user 
information. 

For generating tiie use enabling signal ES for the information processmg 
means 4 the communication device 1 includes use enabling means 5. The use enabling 
means 5 are arranged for enabling the use of the communication device 1, thus for generating 

10 and delivering the use enabling signal ES to the information processing means 4, if the 
security code entered by the user corresponds to the security code information SCI and if, 
additionally, the movement of the first data carrier DCl caused by the handling of the first 
data carrier DCl corresponds to the specified movement data MI, if a second security feature 
corresponding to the first data carrier DCl and which can be rendered available to the 

IS communication device 1, tliat is to say, the security code that can be entered by a user of the 
communication device 1 and if a first security feature corresponding to the first data 
carrier DCl or to its data circuit, which first security feature represents the movement of the 
first data carrier DCl caused by a user of the conmiunication device 1 when the first data 
carrier DCl is handled. 

20 Accordingly, the use enabling means S are arranged such that the two security 

features can be taken into account if the two security features correspond to the first data 
carrier DCl or its data circuit, which matter will be discussed hereafter. 

For the user to enter the secvirity code by hand, the conunvmication device 1 
comprises a second security feature feeding stage 6, which is realized by an input/output 

25 interface 7, the latter having a keypad 7A for entering alphanumeric signs and a display 7B 
for visualizing input alphanumeric signs or for visualizing indications or messages for the 
user of the commimication device 1 . The second security feature feeding stage 6 is fijrther 
arranged for delivering the security code data SCD representing the security code input by 
the user. Via the keypad 7A may further be fed adjustable or selectable transaction 

30 parameters in connection with the business transaction, which parameters can be delivered in 
the form of transaction parameter data TPD to the information processing means 4. 

The conmiunication device 1 fiirther includes a fiurst security feature supply 
stage 8 by means of which the communication device 1 can be supplied with the first security 
feature, that is, the movement of the first data carrier DCl or its data circuit or this feature 
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can be rendered available to the device 1. The first secxirity feature supply stage 8 comprises 
for this purpose a movement detection stage, which is realized by the antenna 
configuration 2. The first security feature supply stage 8 fiirther comprises a movement 
detection stage 9 which is provided for receiving the first antenna signals SI, the second 

S antenna signals S2 and the third antenna signals S3 and, based on the anteima signals SI, S2 
and S3, for detecting the respective current movement in which the three coordinates X, Y 
and Z of the space are taken into account as well as a time-dependent change of the three 
coordinates X, Y and Z. The movement detection stage 9 is fiirther arranged for generating 
and delivering position data PD, velocity data VD and acceleration data AD, the position 

10 data PD representing the position at a respective instant of the first data carrier DCl relative 
to the coordinate origin within the commxmication area and the velocity data VD representing 
the velocity at the respective position of the first data carrier DCl and the acceleration 
data AD representing the acceleration at the respective position of the first data carrier DCl . 
The data PD, VD and AD form movement data which movement data form the first security 

15 feature. Accordingly, the use enabling means 5 assisted by the antenna configuration 2 

forming the movement detection stage are arranged for receiving the signal S firom the first 
data carrier DCl in a contactless manner which data carrier DCl can be inserted in the 
communication area of the conmiunication device land assisted by the movement detection 
stage 9 for detecting the movement of the data carrier DCl or its data circuit while use is 

20 made of the signal S that can be received firom the first data carrier DCL 

The commxmication device 1 fiirther includes a security feature processing 
stage 10 which is arranged for receiving tiie security code data SCD and for receiving the 
position data PD, the velocity data VD and the acceleration data AD. The secxority feature 
processing stage 10 is fiirther arranged for receiving the specified security information SCI 

25 and the specified movement data MI. The security feature processing stage 10 is fiirther 
arranged for generating and delivering the use enabling signal ES to the information 
processing means 4 if the entered security code corresponds to a comparison code 
represented by the security code information SCI, that is to say, corresponds to the specified 
security information and if, additionally, the movement between the data carrier DC and the 

30 communication device 1 corresponds to specified status of the movement represented by the 
specified movement data MI. 

In the following the mode of operation of the communication device 1 is 
explained witii reference to an illustrative embodiment for the communication device 1 as 
shown in Fig. 1 . According to this illustrative embodiment it is assumed that the 
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communication device 1 is a part of an electronic registration cash desk which is connected 
to a conmaunication server of a department store via its communication connection CC, the 
commxmication server on its side being connected for conmiunicating with data processing 
arrangements of banks or credit card companies or data carrier management agencies via the 
Internet and/or the telephone network, so that electronic business transactions can be carried 
out with the aid of the communication device 1. The bxisiness transactions in the present case 
are cashless payments for goods. 

In the first data carrier DCl is stored information that enables a querymg of 
security code information SCI that corresponds to a user and specified movement data MI 
firom a data carrier management agency corresponding to the same user, in order to be able to 
establish in the commimication device 1 whether the user is at all authorized to utilize the 
communication device 1. 

For this purpose the communication device 1 is provided for implementing a 
method of enabling the use of the communication device 1. It is then assumed that the first 
data carrier DCl with its data circuit is moved - in the present case by a user - along the 
movement track TR which is shown in a dashed line along the points PI, P2, P3, P4, P5, P6, 
P7 and P8. The movement track TR chosen by the user and only known to the user moves 
along straight connection lines between the points PI to P8. Once the first data carrier DCl 
has been inserted in the commimication area of the communication device 1, the signal S can 
be received with the three antenna panels 2A, 2B and 2C and can be delivered to the signal 
processing stage 3 and the movement detection stage 9 in the form of the first antenna 
signal SI, the second antenna signal S2 and the third antenna signal S3. 

According to the method the communication device 1 receives the specified 
movement data Ml corresponding to the second security feature, which data represent the 
specified status of the movement of the data carrier DC, For this purpose in the data 
processing stage 3 first the information is evaluated that is conununicated to the 
communication device 1 by means of the signal S for querying the security code 
information SCI and the specified movement data MI. During this operation the mformation 
stored in the first data carrier DCl is delivered to the mformation processing means 4 in the 
form of signal information SI. The information processing means 4 subsequentiy query the 
user-specific security code information SCI assigned to the first data carrier DCl and the 
specified movement data MI firom the data carrier management agency. The security code 
information SCI sent by the data carrier management agency to the communication device 1 
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as well as the specified movement data MI are delivered to the security feature processing 
stage 10 by the information processing stage 4. 

According to the method the use of the commxmication device 1 with the first 
security feature and the second security feature is made possible if the second security feature 
5 corresponds to the security code mformation SCI and if the first security feature corresponds 
to the specified movement data which represent the specified status of the movement, the two 
security features corresponding to the first data carrier DCl or its data circuit and the second 
security feature representing the security code entered by the user and the first security 
feature representing the user-caused movement of the first data carrier DCl or of the data 
1 0 circuit included therein. 

According to the method the signal S of the first data carrier DCl mserted in 
the communication area is fiirther received in a contactless way and the commtmication 
device 1 detects the movement making use of tiie signal S caused by the first data 
carrier DCl and received by the communication device 1. 
15 Then almost simultaneously with the processing of the antenna signals S 1, S2 

and S3 in the signal processing stage 3 comes the detection of the movement status in the 
movement detection stage 9 in which use is made of the first antenna signals SI, the second 
antenna signals S2 and fiie third antenna signals S3. The movement track TR chosen for the 
first data carrier DCl by the user then has in essence a three-dimensional pattern zigzagging 
20 in the conmiunication area. Then there is a change of direction at the points PI to PS. The 
space-dependent position of the individual points PI to P8 is indicated in tiie Fig. 1 by their 
projections on the first antenna panel 2A, the second antenna panel 2B and the third antenna 
panel 2C, the projections on the first antenna panel 2A being indicated by crosses XYl 
to XY8 and the projections on the second antenna panel 2B by squares YZl to YZ8 and the 
25 projections on tiie third antenna panel 2C by crosses XZl to XZ8. Accordingly the 

projections of the point PI are featured by the reference characters XYl, YZl and XZL 
Furthermore, the projections of the point P2 are featured by the reference characters XY2, 
YZ2 and XZ2. Further, the projections of the point P3 are featured by the reference 
characters XY3, YZ3 and XZ3. Further, the projections of the pomt P4 are featured by the 
30 reference characters XY4, YZ4 and XZ4. Further, the projections of flie point P5 are featured 
by the reference characters XY5, YZ5 and XZ5. Furttier, the projections of the point P6 are 
featured by the reference characters XY6, YZ6 and XZ6. Further, the projections of the 
point P7 are featured by the reference characters XY7, YZ7 and XZ7. Further, the projections 
of the point P8 are featured by the reference characters XY8, YZ8 and XZ8. 
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According to the method the movement of the data carrier DCl is detected 
taking into account the three coordinates X, Y and Z of the space and a time-dependent 
change of the coordinates X, Y and Z. For this purpose, as soon as the signal S is received by 
the antennas A of the antenna configuration 2, the position data PD are continuously 
generated and delivered in the movement detection stage 9 and the velocity data VD and 
acceleration data AD are generated and delivered to the security feature evaluation stage 10 
based on a time-dependent change of the first anteima signal SI » the second antenna signal S2 
and the third antenna signal S3. The data PD, VD and AD thus generated are continuously 
stored by tiie security feature processing stage 10 after a movement track TR has been 
finished, thus after the first data carrier DCl was again removed firom the communication 
area, and compared with the specified status of the movement represented by the specified 
movement data MI. 

Then in the secxirity feature processing stage 10 the security code entered by 
the user by means of the keypad 7A is compared with the comparison code represented by 
the security code information SCI. Not until the two security features applied to the 
commimication device, that is to say, the seciirity code entered by the user and the movement 
caused by the user, corresponds to the security code information SCI or the specified 
movement data MI, is the use enabling signal ES generated by the security feature processing 
stage 10 and delivered to the information processing means 4. Not until this time can the 
communication device 1 be used by a user to execute a business transaction, for which 
transaction-parameter data TPD entered or selected by the input/output interface 7 are 
delivered by the conununication device 1 via the transaction information TI. 

This offers the advantage that for enabling the use of the communication 
device 1 not only a security code that is usually hard to notice and therefore often written on 
a piece of paper in a user's purse, but in addition to the customary security code a movement 
of the first data carrier DCl is taken into account that is easy i notice for a user and can be 
performed very individually in many ways and is only known to this one user, which 
movement considerably improves the protection against unauthorized use compared to the 
conventional security code. 

At this point it should be observed that the movement track TR may also 
include curved track elements which can be generated for example by a signature-like 
movement of the first data carrier DCl within the communication area. 

It should further be observed that also a plurality of data carriers may be 
present whose common or succesisive movement can be taken into account as a first security 
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feature in the communication device 1. This is particularly of interest if the data carriers 
occur at various positions mutually apart in a personal item such as a ballpoint or a keyring of 
a user of the communication device. 

The data carrier DCl is in the present case realized by a so-called chipcard, as 
fhey are used in a cashless society. 

It should be observed, however, that the data carrier DCl may also be 
produced as an intelligent label or as a part of a piece of garment or of a piece of jewehy or 
as part of another product the everyday life. 

The communication device 1 shown in Fig. 2 produces an electronic cash 
terminal for which a cash terminal display 1 A is provided by which an amount to be paid can 
be displayed to the customer. 

Fig. 2 further shows a mobile telephone 1 1 which comprises a telephone 
keypad 12 and a telephone display 13 and a second data carrier DC2, which includes a data 
circuit. In the commxmication device 1 is further included a cash terminal deposit surface IB 
on which is visible optically perceivable to a user a position range for positioning the mobile 
telephone 1 1 which stretches out between two position marks IC and ID. It should be 
observed that the position range may also stretch out in the form of a circle or a square. 

The data carrier DC2 installed ui the mobile telephone 1 1 is in the present case 
equipped with a first interface DC2A which is arranged for contactless communication, and a 
second interface DC2B which is arranged for contactless communication in inductive 
maimer. The security code data SCD on the data carrier DC2 can be received by means of the 
first interface DC2A, which code data in the present case can be entered by the user of the 
mobile telephone 1 1 by means of the telephone keypad 12. The data carrier DC2 fiirther has 
encoding means not shown in Fig. 2 which are provided as a protection against deceitful 
wheeling and dealing for generating encoded security code data SCD' corresponding to the 
security code data SCD. 

The comrnxmication device 1 is arranged for contactless communication with 
the data carrier DC2 and for this purpose has the anteima configuration 2 which is here 
formed by a single loop-shaped antenna A by means of which an electromagnetic field 
defining the communication range of the anteima configuration 2 can be generated in a region 
between the position marks IC and ID. 

Once the mobile telephone 1 1 is positioned on the cash terminal deposit 
surface IB so that the data carrier DC2 ends up between the position marks IC and ID in the 
vicinity of the antenna A, there can be communication with the data carrier DC2 when use is 
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made of the second interface DC2B of the data carrier DC2. According to the method 
commimication takes place here between the communication device 1 and the data 
carrier DC2 or its data circuit and both the first security feature and the second security 
feature for enabling the use of the communication device 1 are offered or rendered available 
to this communication device 1, which will be disciissed in more detail hereafter. 

During communication not only the signal S, but also a component of the 
signal information SI as well as the encoded security code data SCD' can be communicated 
to the communication device 1, in which the antenna signal SI can be supplied by the 
antenna A. The signal processing stage 3 in the present case is used not only for delivering 
the signal information SI but also for evaluating and delivering the encoded security code 
data SCD' to the information processing means 4. The information processing means 4 are in 
the present case provided additionally for delivering the encoded security code data SCD' to 
the security feature processing stage 10. 

The movement detection stage 9 is arranged for receiving the antenna 
signal SI and for generating the position data PD which in the present case show the 
movement of the data carrier DC2 in the way that the data carrier DC2 is inserted in the 
communication area by a movement once the antenna signal S 1 can be received As a result, 
the specified status of the movement is given by the fact that contactless communication with 
the data carrier DC can be realized. Accordingly, the commxmication device 1 is arranged for 
ofifering or rendering both the first security feature and the second security available to the 
use enabling means 5 use is made of the contactless cormnunication between the 
communication device 1 and the data carrier DC. In this case the first security feature supply 
stage 6 is formed by the antenna configuration 2, the signal processing stage 3 and the 
information processing means 4. At this point it should be observed that the first security 
feature supply stage 6 may also be form.ed by the antenna configuration 2 and the signal 
processing stage 3 while in this case the signal processing stage 3 is provided for supplying 
the encoded seciirity code data SCD' to the security feature processing stage 10 as this is 
shown in Fig. 2 by the broken line between the signal processing stage 3 and the security 
feature processing stage 10. 

It should fiirther be observed that the cash terminal deposit surface IB can also 
be arranged inside a mobile phone cradle of the cash terminal 1, as a result of which 
positioning of the mobile phone 11 is made easier for tiie user. Furthermore there may be 
provided fliat for the purpose of positioning the mobile phone 1 1 at least a strip-like element 
can be installed on the cash terminal deposit surface IB. 
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It shoiild further be observed that the movement detection stage 9 may also be 
provided for monitoring as to whether the mobile phone 1 1 starting from a first touching of 
the keypad 12 until a final touching of the telephone keypad 12 is positioned inside the 
communication area. It should fiirther be observed that the movement detection stage 9 may 
also include time measuring means by which for example a defined time of presence in the 
communication area can be monitored. 

A further observation is that the movement detection stage 9 may also be 
arranged for detecting a sequence of movements, characterized by presence and absence of 
the second data carrier DC2 in the commimication area, while different time criterions may 
be important for parts of the sequence. As a result, for example an application can be realized 
in which the mobile phone is to be removed very rapidly three times in fix)m the 
conmiunication area and brought back into the communication area after the security code 
has been successfully entered by the telephone keypad 12 as an entry of second security 
feature. 

It should further be observed that the antenna configuration 2 can also have 
more than one antenna and that the specified status of the movement may be defmed by a 
sequential accessmg of the second data carrier DC2 for a contactiess communication with the 
individual antennas and that the movement detection stage 9 may be arranged for processing 
sequentially occurring antenna signals. 

The commimication device 1 shown in Fig. 3 has two antennas A and A' 
positioned a distance apart in the neighborhood of their cash terminal deposit surface IB, the 
fkst anteima signal SI being receivable from the first antenna A and the second antenna 
signal S2 being receivable from the second antenna A'. The mobile telephone 1 1 shown in 
Fig, 3 has a fourth data carrier DC4 in addition to a third data carrier DC3 which has a 
configuration similar to the second data carrier DC2 shown in Fig. 2, which fourth data 
carrier DC4 similarly to the third data carrier DC3 is designed for contactiess comiaunication 
and for this purpose has a third mterface DC4B and in its turn comprises a data circuit. In the 
present case the third data carrier DC3 can be suppUed wdth electric energy for its operation 
via the first interface DC3 A. The fourth data carrier DC4 can be supplied with electric energy 
via an inductive coupling between the antenna configuration 2 and an induction loop (not 
shown in Fig. 3) of the third interface DC4B with the aid of the third mterface DC4B. In this 
case the specified condition of the movement of the two data carriers DC3 and DC4 is given 
in that the mobile telephone 1 1 is positioned on the cash terminal deposit surfacelB so that 
the position of the third data carrier DC3 corresponds to the anteima A and the position of the 
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fourth data carrier DC4 corresponds to the antenna A'. In this position a simultaneous 
communication with the two data carriers DC3 and DC4 or with their data circxiits is made 
possible, where the signal S can be received by the first antenna A and the first antenna 
signal SI representing the signal S can be delivered by the first antenna A, and where a 
signal S' that may be caused by the third data carrier DCS can be received by the second 
antenna A' and the second antenna signal S2 representing the signal S' can be delivered to 
the movement detection stage 9 by the second antenna A' which is arranged for detecting and 
evaluating the appearance of the two anteima signals SI and S2. 

Also in the present case it should be observed that the specified condition of 
the movement of the two data carriers DCS and DC4 may be defined as a static condition as 
well as a change of condition alternating between presence and absence witiiin the 
commimication areas of the antennas A and A', which alternating change of condition can be 
generated by the user by suitably handling the mobile telephone 1 1 . 

The conmivmication device 1 shown in Fig, 4 embodies a mobile telephone, 
The communication device 1 comprises a telephone antenna 1 5 connected to its 
communication connection CC by means of which the transaction information TI can be 
communicated. The communication device 1 fiirther comprises a fifth data carrier DCS 
which in its turn comprises a data circuit and is produced as a dual interface data carrier, 
which fifth data carrier DCS comprises second communication means 16 which are arranged 
for contact-bovmd communication and which are provided for rendering the second security 
feature available and which comprise a multiplicity of contacting fields 17 by means of 
which the fifth data carrier DCS can be brought into contact with corresponding contacting 
fields not shown in Fig. 4 of the communication device 1. The security code data SCD can be 
supplied to the fifth data carrier DCS via the second commimication means 16 firom the 
keypad 7A. Accordingly, the second commimication means 16 produce the second security 
feature supply stage 6 of the communication device 1 and the second security feature 
corresponds to the fifth data carrier DCS or to its data circuit, respectively. 

The fifth data carrier DCS fiirther comprises first communication means 1 8 
which are provided for contactless communication and for rendering the first security feature 
available, so that they form the first security feature supply stage 8, which will be fiirther 
discussed hereafter. 

The fifth data carrier DCS fiirflier comprises a first electric cuxuit 19 forming 
its data circuit, which comprises circuit components for realizing the second communication 
means 16 and the first communication means 18, which are provided for generating and for 
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delivering or receiving and for processing, respectively, electric signals occurring during the 
respective communication. The communication device 1 further comprises the antenna 
configuration 2 to which circuit 19 is connected and which has a third antenna Al in this 
case. The third antenna Al forms part of the first communication means 18. 

In tiie present case the use enabling means S are realized by the fifth data 
carrier DCS or by its data circuit, so that according to the method the xise of the 
communication device 1 is enabled by the fifth data carrier DCS or its data circuit, 
respectively. 

The commxmication device 1 further includes a sixth data carrier DC6 which 
has a fourth interface 20 which is arranged for contactless communication and has a second 
electric circuit 21 which forms its data circuit. The fourth interface 20 has a fourth antenna C 
which is connected to the circuit 21 and by means of which a contactless communication can 
be effected. The sixth data carrier DC6 is installed in the commimication device 1 at a 
distance fi-om the fifth data carrier DCS. The first security feature corresponds in the present 
case to the two data carriers DCS and DC6 and to their data circuits respectively, and 
represents a movement of the two data carriers DCS and DC6. 

The two antennas Al and C are in the present case arranged inside the 
respective data carrier DCS or DC6, the data carriers DCS and DC6 here being arranged as a 
chipcard and rendering a space available necessary for the respective antenna Al or C, so that 
the position of the two antennas Al and C within the communication device 1 in essence 
corresponds to the position of the respective data carrier DCS or DC6 within the 
conmiunication device 1 . The data carrier DCS can be inserted in the communication 
device 1 and removed therefrom. However, it should be observed that the antennas Al and C 
respectively may be accommodated irrespective of the respective position of the data 
carriers DCS and DC6, in which in a case like this the two data carriers DCS and DC6 are to 
include connection means which make a connection possible between the respective data 
carriers DCS and DC6 and the associated respective antenna Al or C. This is especially 
advantageous when the data carriers DCS and DC6 are inseparably integrated in the 
commimication device, or are present in the form of relatively small modules and the 
antenna Al and C are arranged in parts of a housing of the communication device 1. This is 
particularly necessary if coils are provided as the antennas Al or C, which coils are to cover a 
certain Tninimnni sur&ce to enable contactless communication. At this point it should be 
observed that the antennas of the antenna configuration 2 can also be produced by means of 
single-pole or multipole antennas. It should further be observed at this point that in lieu of the 
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data carriers DCS and DC6 also only their data circuits may be provided, which are then to be 
equipped with respective communication means. The data circuits may be provided for 
example as part of electronics of the mobile phone but may also be provided independent of 
these electronics. 

Fig. 4 further shows part of an electronic cash terminal 22 which includes a 
terminal signal processing stage 23 and a terminal anteima configuration 24. The terminal 
antenna configuration 24 comprises a fifth antenna B and a sixtti antenna B', each of the 
antennas B and B' being provided for cooperation with a respective antenna that can be 
installed opposite. The terminal signal processing stage 23 is connected to the antennas B 
and B' and, utilizing the antennas B and B', provided for generating and delivering a 
respective high-fi-equency excitation signal which, within a relatively small communication 
area of the respective antenna B or B\ has its effects in their neighborhood. By means of the 
excitation signal the two data carriers DCS and DC6 can be supplied with electric energy as 
soon as they are inserted in the communication area assigned to the respective antenna B 
or B' by a suitable handUng of the conxmimication device 1 . 

In the present case the specified condition of the movement of the two data 
carriers DCS and DC6 or thek data circuits is defined such that the fifth data carrier DCS or 
the thkd antenna Al respectively is positioned opposite to the fifth antenna B and the sixth 
data carrier DC6 or the fourth antenna C opposite to the sixth antenna B'. In this specified 
condition, by means of a modulation of the respective excitation signal, a signal S 
representing first signal information SIl can be commxmicated firom the fifth data 
carrier DCS and furthermore a signal S' representing second signal information SI2 firom the 
sixth data carrier DC6 to the terminal antenna configuration 24 and afterwards also to the 
terminal signal processing stage 23. 

The terminal signal processing stage 23 is arranged for processing the two 
signal information signals SIl and SI2. The terminal signal processing stage 23 is further 
arranged for contactless conmiunication of its available transaction data TPD to the fifth data 
carrier DCS by means of a modulation of the excitation signal as soon as the first signal 
information SIl can be received. In similar manner also the signal information SIl or SI2 
present at the terminal signal processing stage 23 can be communicated to the fifth data 
carrier DCS. 

The use enabling means S are in the present case arranged for taking account 
of the movement of tite mobile phone relative to the cash terminal 22 while the antenna 
signal SI is used, which will be further discussed hereafter. 
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The modulated excitation signal can be received by the antenna Al from the 
fifth data carrier DCS, The signal processing stage 3 is arranged for receiving the antenna 
signal SI that can be delivered by the antenna Al and for evaluating the antenna signal SI 
with respect to the two signal information items SIl and SI2. By means of the signal 
processing stage 3 the antenna signal SI can be converted into the respective signal 
information items SIl and SI2 and as the case may be into the transaction data TPD. In the 
present case the movement detection stage 9 is connected downstream of the signal 
processing stage 3 and arranged for detecting Ihe movement while use is made of the signal 
information SIl and SI2 represented by the antenna signal SI . For this purpose the movement 
detection stage 9 can detect whether the first signal information SIl and the second signal 
information SI2 occur synchronously. Accordingly, the positioning data PD that can be 
delivered by the movement detection stage 9 represent the time-dependent appearance of 
both signal information SIl and SI2. Furthermore, there is provided that the second signal 
information SI2 can be rendered available in the security feature processing stage 10 for a 
further check. 

The security feature processing stage 10 is arranged for receiving the security 
code data SCD representing the first security feature and for receiving the positioning 
data PD representing the second security feature and, if the security code data SCD 
correspond to the security code information SCI and the positioning data PD correspond to 
the specified movement data MI arranged for generating and delivering the use enabling 
signal ES. 

The security feature processing stage 10 is in the present case arranged for 
checking whether the second signal infomiation SI2 was really generated by the sixth data 
carrier DC6. The check information CI necessary for checking the signal information SI2 is 
stored in the fifth data carrier DCS by memory means 25. Furthermore, the memory 
means 25 can store the security code information SCI and the specified movement data MI, 
which security code information and specified movement data represent in this case the 
simultaneous occurrence of the two signal information SIl and SI2 as a specified condition of 
the movement of the two data carriers DCS and DC6. This impUes that the fifth data 
carrier DCS is positioned opposite to the fifth antenna B and tiie sixth data carrier DC6 
opposite to the sixth antenna B' if the two signal information signals SIl and SI2 occur 
simultaneously and the second signal information items SI2 really comes fix)m the sixth data 
carrier DC6. 
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It shoxild be observed that the two information signals SCI and MI can also be 
applied to the communication device 1 via the communication connection CC as this was 
explained with reference to Fig. 1 . 

The use enabling signal ES that can be generated by the security feature 
processing means 10 can be delivered to the second commimication means 16 by means of 
which the use enabling signal ES can be communicated to the information processing 
means 4 in a contact-bound way, after which the information processing means 4 can process 
the transaction parameter data TPD as a constituent part of the transaction information TI, 
which transaction parameter data TPD can be received via the first communication means 16, 
and the communication device 1 can deliver the transaction information TI. 

It should be observed that also in the case at hand the specified condition of 
the movement of the two data carriers DCS and DC6 may be given by a time-dependent 
sequence of presence or absence of one of the data carriers DCS or DC6 or of the two data 
carriers DCS and DC6 with respect to the positions of tiie two antennas B and B\ 

It should further be observed that the movement detection stage 9 may also be 
arranged for receiving the antenna signal S 1 and for evaluating a signal strength of the 
antenna signals SI, as a result of which conclusions about the state of movement may be 
drawn during the time-dependent variation of the signal strength. In this connection it should 
further be observed that also in the case at hand the movement detection stage 9 may also be 
arranged for generating velocity data VD and/or acceleration data AD in addition to the 
position data PD. 

Referring to Fig. 4 it should further be observed that the two data carriers DCS 
and DC6, in which the signals S and S' are used and the terminal antenna configuration 24 
and the terminal signal processing stage 23 may be arranged for communicating with each 
other, while the moven. ^nt detection stage 9 may be arranged for detecting the movement of 
the two data carriers DCS and DC6 employing or evaluatii^^^ such a communication. In this 
coimection it should further be observed that the security feature information SFI may be 
stored, for example, in the sixth data carrier DC6 and during such communication can be 
rendered accessible or rendered available to the fifth data carrier DCS. 

It should further be observed that the second communication means 18 may 
also comprise a multiplicity of antennas Al, A2 and A3 and that the signal processmg 
means 3 may be arranged for processing antenna signals SI, S2 and S3 which are assigned to 
a respective one of the antennas Al, A2 and A3, as this is shown in Fig. 4 by dotted lines. 
Such an antenna configuration 2 may for example be interesting if the specified state of the 
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movement of the fifth data carrier DCS is defined by information content of information 
rendered available by the respective antenna Al, A2 or A3 or by the presence or absence of 
some or all antenna signals SI, S2 or S3 of the individual antennas Al, A2 or A3, 
respectively- In a case like this it has proved to be particularly advantageous if the fifth data 
carrier DCS has the movement detection stage 9 in addition to the signal processing stage 3, 
to which detection stage 9 the respective antenna signals SI, S2 and S3 can directly be and 
which is arranged for a direct evaluation of the antenna signals S 1 , S2 and S3, which is 
indicated in Fig. 4 by dotted lines. 

At this point it should be observed that the communication device 1 may also 
comprise only the fifth data carrier DCS and that the sixth data carrier DC6 may be omitted. 
This is particularly advantageous if the antenna configuration 2 has a plurality of antennas 
arranged mutual distances apart, such as for example the antennas Al, A2 and A3 or the 
communication device 1 which includes in addition to the conununication means 18 the 
antennas assigned to the second conomunication means 18. 

It should further be observed that a data carrier provided for contactless 
communication may also be arranged for contactless communication in a capacitive way. 

Even if in the examples of embodiments discussed hereinbefore, all in 
connection with the enabling of the use of the communication device 1 , were specified to 
transaction information TI to be delivered by the commimication device 1, it should be 
observed at this point that in connection with tiie enabling of the use of the communication 
device 1 the tiser information may also be m the form of receive mformation vsdiich can be 
received by the communication device 1 and which is to be accessible particularly to a user 
who makes himself known as an authorized user of the communication device 1 by means of 
the first security feature and the second security feature. In this connection it should further 
be observed that the device may also be formed by a laptop or by a so-called personal digital 
assistant for the use of which the processmg of user information by the use enabling means 5 
can be made possible. 

Furthermore, it should be observed at this point that the device may also 
comprise a combmation of a mobile phone - thus a communication device - and a so-called 
personal digital assistant, and that by different movements of one or more data circuits, which 
may be inside or outside such a combination device, different functions of the combination 
device may be enabled for use by a user. 

It should further be observed that the second security feature can also be 
represented by biometric features such as, for example, a fingerprint 
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As regards the excitation signal modulation which is the case with contactiess 
commxmication it should be established that this is an ampUtude modulation of the excitation 
signal. It should particularly be pointed out that the modulation which can be effected by 
means of the fifth data carrier DCS can be generated by a load modulation of the excitation 

5 signal. It should be observed, however, that there may also be a reflexion modulation. It 

should further be observed that the modulation of the excitation signal may also be a phase or 
frequency modulation. 

Further, it should be observed that also the first security code itself can be 
provided for enabling the device. 

10 It should further be observed that the data circuit as such in the form of a 

relatively small integrated circuit can also be used independent of a data carrier or its housing 
such as, for example, as an implant in the body of a human being or as a component of an 
electric circuit of an appliance to which the data circuit is inseparably connected. In this 
connection it should further be observed that the data circuit in the form of an integrated or 

15 discrete circuit may also form the use enabling means of the device. 

It should further be observed that a data circuit or a data carrier comprising the 
data circuit in a device can be used long before the method is implemented or immediately 
when the method is implemented. 



